diff --git a/CMakeLists.txt b/CMakeLists.txt
index 06ce07e..48fc755 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -253,8 +253,6 @@ if(FUZZ)
   set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fsanitize=address,fuzzer-no-link -fsanitize-coverage=edge,indirect-calls")
 endif()
 
-add_definitions(-DBORINGSSL_IMPLEMENTATION)
-
 if(BUILD_SHARED_LIBS)
   add_definitions(-DBORINGSSL_SHARED_LIBRARY)
   # Enable position-independent code globally. This is needed because
@@ -618,6 +616,7 @@ target_include_directories(crypto PUBLIC
   $<INSTALL_INTERFACE:include>
 )
 set_property(TARGET crypto PROPERTY EXPORT_NAME Crypto)
+target_compile_definitions(crypto PRIVATE BORINGSSL_IMPLEMENTATION)
 
 if(FIPS_SHARED)
   # Rewrite libcrypto.so to inject the correct module hash value. This assumes
@@ -663,6 +662,7 @@ add_library(ssl ${SSL_SOURCES})
 # here.
 set_property(TARGET ssl PROPERTY EXPORT_NAME SSL)
 target_link_libraries(ssl crypto)
+target_compile_definitions(ssl PRIVATE BORINGSSL_IMPLEMENTATION)
 
 add_library(decrepit ${DECREPIT_SOURCES})
 target_link_libraries(decrepit ssl crypto)
@@ -672,6 +672,7 @@ if(APPLE)
 endif()
 add_library(pki ${PKI_SOURCES})
 target_link_libraries(pki crypto)
+target_compile_definitions(pki PRIVATE BORINGSSL_IMPLEMENTATION)
 target_compile_options(pki PRIVATE ${PKI_CXX_FLAGS})
 
 if(BUILD_TESTING)